summaryrefslogtreecommitdiffstats
path: root/apps/apps.h
AgeCommit message (Collapse)Author
2005-04-15const fixesNils Larsch
2005-04-05some const fixesNils Larsch
2004-09-07Reformat smime utility.Dr. Stephen Henson
Add support for policy checking in verify utility.
2004-09-06New X509_VERIFY_PARAM structure and associated functionality.Dr. Stephen Henson
This tidies up verify parameters and adds support for integrated policy checking. Add support for policy related command line options. Currently only in smime application. WARNING: experimental code subject to change.
2004-05-17Remove some unnecessary recursive includes from the internal apps.h header,Geoff Thorpe
and include bn.h in those C files that need bignum functionality.
2004-04-20Reduce chances of issuer and serial number duplication by use of randomDr. Stephen Henson
initial serial numbers. PR: 842
2003-11-28Move another common functionality (reproduced so far with cut'n'paste)Richard Levitte
to apps.c, and give it the hopefully descriptive name parse_yesno().
2003-11-28Forgot to change the declaration of do_subject() to one of parse_name()...Richard Levitte
2003-11-28Allow multi-valued rdns in subjects. This adds the -multivalue-rdn optionRichard Levitte
to 'openssl req' and 'openssl ca'. PR: 779 Submitted by: Michael Bell <michael.bell@cms.hu-berlin.de> Reviewed by: Richard Levitte (there will be some follow-up changes)
2003-11-28Netware-specific changes,Richard Levitte
PR: 780 Submitted by: Verdon Walker <VWalker@novell.com> Reviewed by: Richard Levitte
2003-09-09Generalise the definition of strcasecmp() and strncasecmp() forRichard Levitte
platforms that don't (necessarely) have it. In the case of VMS, this means moving a couple of functions from apps/ to crypto/ and make them general (although only used privately).
2003-04-04Convert save_serial() to work like save_index(), and add aRichard Levitte
rotate_serial() that works like rotate_index().
2003-04-03Make it possible to have multiple active certificates with the sameRichard Levitte
subject.
2003-01-30Add the possibility to build without the ENGINE framework.Richard Levitte
PR: 287
2002-11-13Security fixes brought forward from 0.9.7.Ben Laurie
2002-10-10VMS below version 7 doesn't have strcasecmp, so let's roll our own on VMS.Richard Levitte
PR: 184
2002-10-09Make sure that the 'config' variable is correctly defined and declaredRichard Levitte
for monolithic as well as non-monolithic biuld. More work is probably needed in this area. PR: 144
2002-08-01Make it possible to load keys from stdin, and restore thatRichard Levitte
functionality in the programs that had that before. Part fo PR 164
2002-06-13Add missing prototypes.Lutz Jänicke
Submitted by: Goetz Babin-Ebell <babinebell@trustcenter.de> PR: 89
2002-05-19Reorganise -subj option code, fix buffer overrun.Dr. Stephen Henson
2002-03-06ENGINE module additions.Dr. Stephen Henson
Add "init" command to control ENGINE initialization. Call ENGINE_finish on initialized ENGINEs on exit. Reorder shutdown in apps.c: modules should be shut down first. Add test private key loader to openssl ENGINE: this just loads a private key in PEM format. Fix print format for dh length parameter.
2002-02-22non-Monolith fixes.Dr. Stephen Henson
Submitted by Andrew W. Gray <agray@iconsinc.com>
2002-02-22Config code updates.Dr. Stephen Henson
CONF_modules_unload() now calls CONF_modules_finish() automatically. Default use of section openssl_conf moved to CONF_modules_load() Load config file in several openssl utilities. Most utilities now load modules from the config file, though in a few (such as version) this isn't done because it couldn't be used for anything. In the case of ca and req the config file used is the same as the utility itself: that is the -config command line option can be used to specify an alternative file.
2002-01-25Apply the following changes by Toomas Kiisk <vix@cyber.ee>:Richard Levitte
* make openssl rsa work with -engine chil * misc changes, including debug-linux-ppro Configure target and FORMAT_NETSCAPE-aware load_{,pub}key() This completes the application of his changes.
2001-10-20New functions SSL[_CTX]_set_msg_callback().Bodo Möller
New macros SSL[_CTX]_set_msg_callback_arg(). Message callback imlementation for SSL 3.0/TLS 1.0 (no SSL 2.0 yet). New '-msg' option for 'openssl s_client' and 'openssl s_server' that enable a message callback that displays all protocol messages. In ssl3_get_client_hello (ssl/s3_srvr.c), generate a fatal alert if client_version is smaller than the protocol version in use. Also change ssl23_get_client_hello (ssl/s23_srvr.c) to select TLS 1.0 if the client demanded SSL 3.0 but only TLS 1.0 is enabled; then the client will at least see that alert. Fix SSL[_CTX]_ctrl prototype (void * instead of char * for generic pointer). Add/update some OpenSSL copyright notices.
2001-10-04Because there's chances we clash with the system's types.h, rename ourRichard Levitte
types.h to ossl_typ.h.
2001-09-28ENGINE_register_all_complete() will register all implementations of allGeoff Thorpe
algorithms present in all loaded ENGINEs. The result is that if any of those ENGINEs successfully initialises, and the ENGINE_TABLE_FLAG_NOINIT flag isn't set, then they will always be used (and cached as defaults) in preference to software implementations. Ie. accidental auto-detection of acceleration hardware :-) This change stops all implementations being automatically registered in "openssl" sub-commands, so that the "setup_engine()" handler in apps.c controls which ENGINEs are registered for use. A special case has been added that will revert to this "auto-detect" logic, ie. if the "-engine" switch is used as; -engine auto
2001-09-25Make necessary tweaks to apps/ files due to recent ENGINE surgery. SeeGeoff Thorpe
crypto/engine/README for details.
2001-09-12Reduce the header dependencies on engine.h in apps/.Geoff Thorpe
2001-09-10Put all "common" initialisation in the apps_startup() and apps_shutdown()Geoff Thorpe
macros in apps.h.
2001-09-01Make the necessary changes to work with the recent "ex_data" overhaul.Geoff Thorpe
See the commit log message for that for more information. NB: X509_STORE_CTX's use of "ex_data" support was actually misimplemented (initialisation by "memset" won't/can't/doesn't work). This fixes that but requires that X509_STORE_CTX_init() be able to handle errors - so its prototype has been changed to return 'int' rather than 'void'. All uses of that function throughout the source code have been tracked down and adjusted.
2001-07-12Initial OCSP server support, using index.txt format.Dr. Stephen Henson
This can process internal requests or behave like a mini responder. Todo: documentation, update usage info.
2001-06-28Modify apps to use NCONF code instead of old CONF code.Dr. Stephen Henson
Add new extension functions which work with NCONF. Tidy up extension config routines and remove redundant code. Fix NCONF_get_number(). Todo: more testing of apps to see they still work...
2001-06-23apps_startup() needs a corresponding apps_shutdown().Richard Levitte
2001-06-23Fix UI leak in apps.Dr. Stephen Henson
2001-06-19Change the common application routines to use a UI_METHOD for passwordRichard Levitte
prompting, even when done through the callback.
2001-06-18Provide an application-common setup function for engines and use itRichard Levitte
everywhere.
2001-05-30Extend all the loading functions to take an engine pointer, a passRichard Levitte
string (some engines may have certificates protected by a PIN!) and a description to put into error messages. Also, have our own password callback that we can send both a password and some prompt info to. The default password callback in EVP assumes that the passed parameter is a password, which isn't always the right thing, and the ENGINE code (at least the nCipher one) makes other assumptions... Also, in spite of having the functions to load keys, some utilities did the loading all by themselves... That's changed too.
2001-03-16Add copy_extensions option to 'ca' utility.Dr. Stephen Henson
2001-02-22e_os.h does not belong with the exported headers. Do not put it thereRichard Levitte
and make all files the depend on it include it without prefixing it with openssl/. This means that all Makefiles will have $(TOP) as one of the include directories.
2001-02-19Make all configuration macros available for application by makingRichard Levitte
sure they are available in opensslconf.h, by giving them names starting with "OPENSSL_" to avoid conflicts with other packages and by making sure e_os2.h will cover all platform-specific cases together with opensslconf.h. I've checked fairly well that nothing breaks with this (apart from external software that will adapt if they have used something like NO_KRB5), but I can't guarantee it completely, so a review of this change would be a good thing.
2001-01-23Use OpenSSL_add_all_algorithms instead of the backwards compatibilityBodo Möller
alias SSLeay_add_all_algorithms
2001-01-17Initial OCSP certificate verify. Not complete,Dr. Stephen Henson
it just supports a "trusted OCSP global root CA".
2000-11-06Make all engines available in the openssl application.Richard Levitte
2000-10-28Add the possibility to use keys handled by engines in moreRichard Levitte
applications.
2000-10-26Merge the engine branch into the main trunk. All conflicts resolved.Richard Levitte
At the same time, add VMS support for Rijndael.
2000-10-06More code for X509_print_ex() support.Dr. Stephen Henson
2000-09-15Move up inclusion of conf.h, so non-MONOLITH programs can benefit fromRichard Levitte
it as well, especially in apps.c.
2000-09-03Add 'rsautl' low level RSA utility.Dr. Stephen Henson
Add DER public key routines. Add -passin argument to 'ca' utility. Document sign and verify options to dgst.
2000-07-28New ASN1_STRING_print_ex() and X509_NAME_print_ex()Dr. Stephen Henson
functions. These are intended to be replacements for the ancient ASN1_STRING_print() and X509_NAME_print() functions. The new functions support RFC2253 and various pretty printing options. It is also possible to display international characters if the terminal properly handles UTF8 encoding (Linux seems to tolerate this if the "unicode_start" script is run). Still needs to be documented, integrated into other utilities and extensively tested.
generated by cgit v1.2.3 (git 2.25.1) at 2024-08-03 01:46:49 +0000